TIBCO ActiveMatrix BPM is configured with a single super user which by default is known as tibco-admin. This is an alias to a user in LDAP. The name of the internal user can be changed if desired by adding (or changing) the AdminLdapName property in the de.properties file. Also, which LDAP user is a tibco-admin can be configured in the same properties file. However, adding multiple tibco-admin users in the de.properties file is not supported. 

The tibco-admin user is a member of all groups defined under the system organization model. This system organization model can be accessed via Openspace/Workspace by selecting the Version 0 in Organizations. Once an LDAP container is created, it is possible to map more users to the system organization model groups, granting them similar access as tibco-admin.

For more details on de.properties file, refer to the TIBCO ActiveMatrix BPM Administration Guide > BPM Properties Files.